Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
File:                     EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft (raw, json)
Hash identifier:          sM/yQ211aY9InnthIuCJ5XzMXjFKrkpjJD+pyB25JfE=
Subject key identifier:   72:F0:57:97:7B:D5:AA:D0:3D:4F:E9:04:E0:96:BF:0F:12:89:1C:22
Authority key identifier: 11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5
Certificate issuer:       /CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
Certificate serial:       01A0DE05BDA9B352240672C6BFBF12EC7427
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
Manifest number:          1A07
Signing time:             Sat 26 Sep 2026 14:01:53 +0000
Manifest this update:     Sat 26 Sep 2026 14:01:53 +0000
Manifest next update:     Sun 27 Sep 2026 14:01:53 +0000
Files and hashes:         1: EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl (hash: NWtf9+mF3x+NMngwO9VY0awuzpbdt3dc07KA3CY0LBQ=)
                          2: x3NbWiQWCZXyc2uMnZ5Ab6Fhu_I.roa (hash: 93sj77pr5rKe1tU77xXMj7hopzpAX8jIqepZA0pnhsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 09:18:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:05:bd:a9:b3:52:24:06:72:c6:bf:bf:12:ec:74:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11d47912efd409a46f7cd42741804c7d4f5e1ad5
        Validity
            Not Before: Sep 26 14:01:53 2026 GMT
            Not After : Sep 27 14:01:53 2026 GMT
        Subject: CN=72f057977bd5aad03d4fe904e096bf0f12891c22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ca:a9:5b:df:c7:b7:b8:d4:c4:52:83:d6:a9:
                    d6:85:f2:cd:82:e4:da:76:13:f7:00:b7:dd:72:f7:
                    8a:94:28:3f:f5:c5:06:b3:1c:f5:7e:44:d8:46:dd:
                    43:4f:5f:23:db:a9:49:75:e0:f6:30:4f:b6:56:63:
                    09:4e:91:8c:65:24:5b:14:ff:a3:90:21:c8:5d:61:
                    69:10:24:a5:9b:67:5b:8b:82:68:df:8c:72:0d:5e:
                    3d:34:43:97:4b:76:3d:1f:5b:dc:f8:a6:55:35:5e:
                    4c:c2:43:32:49:ba:75:92:a0:af:7c:03:ab:f1:22:
                    cd:3d:dd:27:8b:4d:7f:22:bb:1a:62:04:59:d9:84:
                    6c:d2:ad:9c:1a:9f:7f:e2:c9:0f:81:da:cc:5e:c9:
                    3e:c1:bb:f0:c1:53:8d:f0:47:5d:a5:11:64:cb:27:
                    49:81:21:c7:98:33:4b:1e:8e:67:ac:28:5b:8f:8c:
                    19:24:4d:4c:bc:97:fb:0d:01:6c:0a:95:01:51:1f:
                    f8:1e:15:12:60:82:e3:f4:9d:05:bf:d4:1e:bb:06:
                    bb:b0:40:21:b1:e3:c2:4f:2b:fe:94:20:85:35:45:
                    81:cb:81:e8:50:66:34:b9:49:cf:a6:2c:09:f1:7b:
                    54:71:e7:c8:7b:37:0e:c7:c3:52:f5:c5:18:85:6e:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F0:57:97:7B:D5:AA:D0:3D:4F:E9:04:E0:96:BF:0F:12:89:1C:22
            X509v3 Authority Key Identifier:
                keyid:11:D4:79:12:EF:D4:09:A4:6F:7C:D4:27:41:80:4C:7D:4F:5E:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/8025f6-5f38-4ddf-917d-114c2400c3e3/1/EdR5Eu_UCaRvfNQnQYBMfU9eGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:06:d2:a4:2d:d2:24:93:06:21:dd:20:90:da:61:3d:5a:0d:
         25:de:95:bf:3d:91:3b:ce:b9:1c:ca:6d:6b:ca:2f:29:b8:45:
         06:95:58:8f:87:4a:98:2a:d2:2c:a3:63:22:35:eb:bf:0d:b6:
         b3:87:2a:21:00:0c:53:80:c0:5e:c7:cb:6c:3a:ad:74:ba:65:
         87:40:11:e8:ce:d6:74:b1:dc:25:86:e5:36:dc:c5:cb:fd:71:
         2a:1c:45:19:72:d1:99:be:63:dd:61:5e:48:33:a8:27:5f:ee:
         bb:b1:c2:67:24:35:b4:72:14:53:8b:f2:78:55:ca:f3:fc:8e:
         26:3d:c4:5a:b8:71:5b:f1:93:19:3f:9b:32:31:8a:84:78:a8:
         9f:94:14:ca:a0:d0:c8:1e:a1:9b:3a:aa:45:62:75:53:ea:f3:
         32:78:7f:bb:1c:22:d5:b1:99:b2:4a:d0:f7:f6:8a:62:d3:95:
         66:85:82:44:82:04:ae:c1:a1:45:4a:4f:98:90:03:c1:0d:6a:
         c4:4a:88:c1:ac:ac:b6:c0:cf:4e:8b:a0:42:a2:0a:50:8f:b1:
         ce:d6:97:0f:69:6e:9b:4b:72:a4:4c:d6:3c:7d:7c:e2:34:f2:
         b4:77:5c:c5:16:08:1a:fe:38:dd:92:0e:da:9e:03:4c:47:96:
         a0:80:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 17:28:16 2026 by rpki-client